ISC2 CC Access Controls Concepts Practice Question
A security analyst is reviewing access control mechanisms. Which TWO of the following are examples of logical access controls? (Select two.)
⚠ Common exam trap
CC often tests the physical-vs-logical distinction by including obvious physical controls (guards, fences, bollards) alongside subtle logical ones (smart cards, password policies) to see if candidates can classify correctly.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Smart card authentication for system access
B is correct because smart card authentication is a logical (technical) access control that uses a credential and cryptographic verification to grant or deny access to systems and data. D is correct because a password policy enforcing complexity is a logical control that governs how users authenticate electronically, restricting access through technical rules. A is not correct because a security guard is a physical access control (personnel-based). C is not correct because bollards are physical barriers used to control vehicle access. E is not correct because a perimeter fence is a physical access control.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Security guard at entrance
Why it's wrong here
A security guard is a physical access control, controlling movement through a facility rather than logical access to systems or data. It is tempting because guards verify identity and authorisation, but logical controls are implemented in software, such as passwords, ACLs and biometric logons.
- ✓
Smart card authentication for system access
Why this is correct
Smart card authentication is a logical access control because it governs access through technical means — credentials and certificates validated by a system — rather than physical barriers. It satisfies the stem's requirement by restricting system access based on logical identity verification.
- ✗
Bollards at parking lot
Why it's wrong here
Bollards are physical barriers that stop vehicles entering a parking area, so they control physical access, not logical access to systems. They are tempting because they restrict access, but logical controls operate in software, such as permissions, encryption and authentication mechanisms.
- ✓
Password policy enforcing complexity
Why this is correct
A password complexity policy is a logical access control: it enforces technical restrictions on credentials within the system, not physical barriers. It satisfies the stem's requirement by governing how users authenticate, thereby controlling logical access to resources.
- ✗
Perimeter fence
Why it's wrong here
A perimeter fence is a physical control, restricting bodily access to a site, so it cannot be a logical access control, which governs access to systems and data through technical means such as permissions or authentication. It is tempting because fences genuinely deter intrusion, but that belongs to physical security questions.
Go deeper
Related to this question
Learn chapter
Logical Access Controls
Key term
Policy
A policy is a set of rules or guidelines that defines how an organization manages, secures, and operates its IT systems and services.
Key term
Access control
Access control is the security practice of determining who or what is allowed to view, use, or enter a resource, and under what conditions.
About these practice questions
This CC question is part of Courseiva's 989-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official ISC2 exam blueprint
This CC practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CC exam.